This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft File: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft (raw, json) Hash identifier: xvkaYlvea2u9ojtYGkR3NAHv2lpuO68yvzozkUcg7U4= Subject key identifier: D9:B5:D6:D7:87:11:90:AE:2B:46:F8:85:16:B6:B5:1D:16:9D:AE:57 Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04 Certificate issuer: /CN=b30e3011a0fb3111fbe8493c1230974aef532704 Certificate serial: 019B40919A710EC9E0CECCD214553E4B380A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft Manifest number: 0A5A Signing time: Sun 21 Dec 2025 11:00:42 +0000 Manifest this update: Sun 21 Dec 2025 11:00:42 +0000 Manifest next update: Mon 22 Dec 2025 11:00:42 +0000 Files and hashes: 1: RpILInX8NStLNGo-i8gOsmzL6zY.roa (hash: FpLee9KVIm2tnuSw+HOBh77bwO/f6Y21iVU1yWYIf/s=) 2: bt4jZ_Fg1p7_W1scNCt1lEzJp-I.roa (hash: NTiQWaRJGSQ8lYqtebC2mqNAEmw3CSrzTGYD0GLgxFA=) 3: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl (hash: E53z/CiTOvD9xl+Qjw/ZnSvKwL2D9jvAAHRW5+NkIYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:9a:71:0e:c9:e0:ce:cc:d2:14:55:3e:4b:38:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704 Validity Not Before: Dec 21 11:00:42 2025 GMT Not After : Dec 22 11:00:42 2025 GMT Subject: CN=d9b5d6d7871190ae2b46f88516b6b51d169dae57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:f7:47:5f:de:06:38:57:c5:1a:64:a1:e2: 5f:cb:64:06:da:b5:b6:8a:91:26:bf:08:aa:84:bb: 62:aa:83:ee:af:52:af:43:5d:da:f2:e5:7e:82:b7: cb:fa:8b:71:46:f1:f6:44:e3:13:0b:43:79:d4:18: bc:26:ca:02:f3:3e:93:35:5a:52:4c:4c:66:f2:8d: 08:d1:7c:05:87:fb:eb:f4:27:64:87:69:a5:3a:8b: 4a:bd:ff:96:4d:0c:c2:e4:50:eb:49:fd:82:c0:d9: e4:57:28:f3:16:bb:49:68:10:f5:e7:7b:44:4a:2f: 5b:a6:dc:3a:b3:89:c2:d4:ca:20:13:8d:37:9b:47: 72:6c:f5:81:0f:1f:29:19:ed:a5:df:d7:70:82:79: 9f:47:21:28:e5:f8:ac:ec:ad:4d:24:77:6a:99:60: bd:f5:44:3a:5d:4a:c6:3f:b7:6d:52:d5:47:74:4b: 42:4d:f7:d5:dc:a9:7b:17:49:0f:80:f1:1a:22:24: 79:b6:b2:87:4b:a0:1b:84:87:54:6f:59:7e:53:10: 28:76:55:17:6e:d1:17:fb:70:e9:ee:41:1f:e8:c2: f0:40:48:90:27:0a:dd:2c:58:13:27:51:47:28:5a: 83:ac:c7:3c:98:07:7c:78:71:2d:f8:6a:fa:86:93: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B5:D6:D7:87:11:90:AE:2B:46:F8:85:16:B6:B5:1D:16:9D:AE:57 X509v3 Authority Key Identifier: keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:c9:d5:84:2a:95:78:35:39:12:5e:3d:ac:47:e0:74:8a:37: d0:6d:3a:02:98:f4:f0:51:3e:0b:42:27:0e:59:36:7e:eb:40: e6:dc:51:ff:e2:c8:55:47:f5:c3:5b:21:18:b8:6d:16:27:98: be:14:7f:f4:02:35:a2:36:08:bf:d9:36:04:09:fa:ed:09:54: 54:5b:fb:2b:26:38:cf:8b:7e:d5:4b:64:88:0f:72:0d:fa:11: e0:c9:30:77:d2:06:04:55:fa:1a:5e:b2:c2:a6:e8:29:07:f0: ae:7b:99:8f:60:f5:47:02:8f:93:de:db:ab:e1:9f:71:0b:70: 42:52:3d:88:87:f2:a1:2b:27:f8:01:dc:c8:0d:6b:bd:a0:c8: 96:4b:73:99:80:88:7c:12:65:85:91:1e:f8:09:cb:56:2a:d5: 9f:6f:20:68:f8:d8:c6:69:f1:5e:db:96:9b:64:ac:2d:f2:50: a6:d4:83:0b:b2:a2:83:0b:fa:5c:80:34:db:d9:a4:d9:a8:ca: 0d:6f:cc:08:92:33:35:5f:96:64:37:65:7d:50:12:f3:81:a8: 5e:47:43:29:19:fc:46:85:42:dd:85:e3:d6:67:a8:7e:ba:9d: b8:d3:d4:5c:b0:c8:0e:94:ae:3b:3d:24:33:56:d5:53:66:ee: 28:ba:bc:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkZpxDsngzszSFFU+SzgKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMGUzMDExYTBmYjMxMTFmYmU4NDkzYzEyMzA5NzRhZWY1 MzI3MDQwHhcNMjUxMjIxMTEwMDQyWhcNMjUxMjIyMTEwMDQyWjAzMTEwLwYDVQQD EyhkOWI1ZDZkNzg3MTE5MGFlMmI0NmY4ODUxNmI2YjUxZDE2OWRhZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQf3R1/eBjhXxRpkoeJfy2QG2rW2 ipEmvwiqhLtiqoPur1KvQ13a8uV+grfL+otxRvH2ROMTC0N51Bi8JsoC8z6TNVpS TExm8o0I0XwFh/vr9Cdkh2mlOotKvf+WTQzC5FDrSf2CwNnkVyjzFrtJaBD153tE Si9bptw6s4nC1MogE403m0dybPWBDx8pGe2l39dwgnmfRyEo5fis7K1NJHdqmWC9 9UQ6XUrGP7dtUtVHdEtCTffV3Kl7F0kPgPEaIiR5trKHS6AbhIdUb1l+UxAodlUX btEX+3Dp7kEf6MLwQEiQJwrdLFgTJ1FHKFqDrMc8mAd8eHEt+Gr6hpMHqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNm11teHEZCuK0b4hRa2tR0Wna5XMB8GA1UdIwQY MBaAFLMOMBGg+zER++hJPBIwl0rvUycEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3c0d0VhRDdNUkg3NkVrOEVqQ1hTdTlUSndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wZmZiNjQtZWZjYi00OWY1LTgzNDIt ZjlmYjM4Yzc3YzU1LzEvc3c0d0VhRDdNUkg3NkVrOEVqQ1hTdTlUSndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8wZmZiNjQtZWZjYi00OWY1LTgzNDItZjlmYjM4Yzc3YzU1 LzEvc3c0d0VhRDdNUkg3NkVrOEVqQ1hTdTlUSndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcnVhCqV eDU5El49rEfgdIo30G06Apj08FE+C0InDlk2futA5txR/+LIVUf1w1shGLhtFieY vhR/9AI1ojYIv9k2BAn67QlUVFv7KyY4z4t+1UtkiA9yDfoR4Mkwd9IGBFX6Gl6y wqboKQfwrnuZj2D1RwKPk97bq+GfcQtwQlI9iIfyoSsn+AHcyA1rvaDIlktzmYCI fBJlhZEe+AnLVirVn28gaPjYxmnxXtuWm2SsLfJQptSDC7Kigwv6XIA029mk2ajK DW/MCJIzNV+WZDdlfVAS84GoXkdDKRn8RoVC3YXj1meofrqduNPUXLDIDpSuOz0k M1bVU2buKLq8xA== -----END CERTIFICATE-----Generated at Sun Dec 21 20:35:11 2025 by rpki-client